CVE-2025-52516
Summary
| CVE | CVE-2025-52516 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-01-05 19:15:56 UTC |
| Updated | 2026-10-19 21:10:00 UTC |
| Description | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of service. |
Risk And Classification
Primary CVSS: v3.1 6.2 MEDIUM from ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.001330000 probability, percentile 0.025540000 (date 2026-10-19)
Problem Types: CWE-822 | n/a | CWE-822 CWE-822 Untrusted Pointer Dereference
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | ADP | DECLARED | 6.2 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 3.1 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary | 6.2 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Samsung | Exynos 1330 | - | All | All | All |
| Operating System | Samsung | Exynos 1330 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos 1380 | - | All | All | All |
| Operating System | Samsung | Exynos 1380 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos 1480 | - | All | All | All |
| Operating System | Samsung | Exynos 1480 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos 1580 | - | All | All | All |
| Operating System | Samsung | Exynos 1580 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos 2400 | - | All | All | All |
| Operating System | Samsung | Exynos 2400 Firmware | - | All | All | All |
| Hardware | Samsung | Exynos 2500 | - | All | All | All |
| Operating System | Samsung | Exynos 2500 Firmware | - | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| semiconductor.samsung.com/support/quality-support/product-security-updates | [email protected] | semiconductor.samsung.com | Vendor Advisory |
| semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-52516 | [email protected] | semiconductor.samsung.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.